CVE-2012-5326 Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrato...
MediumCVSS 6.8
EPSS 0.95%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idevspot isupport | = 1.0 | No fix listed |
| idevspot isupport | = 1.02 | No fix listed |
| idevspot isupport | = 1.06 | No fix listed |
| idevspot isupport | = 1.8 | No fix listed |
References
- 18404 exploit
- isupport-function-csrf(72611) vdb-entry